OpenStack on 夜云泊

SSH 登录 OpenStack 实例

Wed, 28 Jun 2023 22:20:05 +0000

基础配置

添加安全组规则，允许 Ping 和 SSH 访问虚拟机：

openstack security group rule create --proto icmp default

root@allone:~# openstack security group rule create --proto icmp default
+-------------------+---------------------------+
| Field             | Value                                                                                                                                                   |
+-------------------+-------------------------+
| created_at        | 2023-06-28T06:26:10Z                                                                                                                                    |
| description       |                                                                                                                                                         |
| direction         | ingress                                                                                                                                                 |
| ether_type        | IPv4                                                                                                                                                    |
| id                | fe9adfc3-dc42-4680-8ecd-ed5a667e1215                                                                                                                    |
| location          | cloud='', project.domain_id=, project.domain_name='Default', project.id='6396365541a74b6b8ea8812d1af05e70', project.name='admin', region_name='', zone= |
| name              | None                                                                                                                                                    |
| port_range_max    | None                                                                                                                                                    |
| port_range_min    | None                                                                                                                                                    |
| project_id        | 6396365541a74b6b8ea8812d1af05e70                                                                                                                        |
| protocol          | icmp                                                                                                                                                    |
| remote_group_id   | None                                                                                                                                                    |
| remote_ip_prefix  | 0.0.0.0/0                                                                                                                                               |
| revision_number   | 0                                                                                                                                                       |
| security_group_id | f10a3927-5e76-47b4-8691-4169348845ae                                                                                                                    |
| tags              | []                                                                                                                                                      |
| updated_at        | 2023-06-28T06:26:10Z                                                                                                                                    |
+-------------------+--------------------------------+

openstack security group rule create --proto tcp --dst-port 22 default

root@allone:~# openstack security group rule  create --proto tcp --dst-port 22 default
+-------------------+--------------------------------------+
| Field             | Value                                                                                                                                                   |
+-------------------+--------------------------------------------+
| created_at        | 2023-06-28T06:26:15Z                                                                                                                                    |
| description       |                                                                                                                                                         |
| direction         | ingress                                                                                                                                                 |
| ether_type        | IPv4                                                                                                                                                    |
| id                | af699cf9-5fc0-45e2-a009-0bb7828e2d1a                                                                                                                    |
| location          | cloud='', project.domain_id=, project.domain_name='Default', project.id='6396365541a74b6b8ea8812d1af05e70', project.name='admin', region_name='', zone= |
| name              | None                                                                                                                                                    |
| port_range_max    | 22                                                                                                                                                      |
| port_range_min    | 22                                                                                                                                                      |
| project_id        | 6396365541a74b6b8ea8812d1af05e70                                                                                                                        |
| protocol          | tcp                                                                                                                                                     |
| remote_group_id   | None                                                                                                                                                    |
| remote_ip_prefix  | 0.0.0.0/0                                                                                                                                               |
| revision_number   | 0                                                                                                                                                       |
| security_group_id | f10a3927-5e76-47b4-8691-4169348845ae                                                                                                                    |
| tags              | []                                                                                                                                                      |
| updated_at        | 2023-06-28T06:26:15Z                                                                                                                                    |
+-------------------+-----------------+

命令行方式

生成秘钥

ssh-keygen -q -N “”

-q 选项表示静默模式，即在生成密钥对的过程中不会输出任何提示信息或警告。

-N 选项后面可以跟一个密码作为参数。该密码将用于保护生成的私钥文件。如果不指定 -N 参数，则私钥文件将不受密码保护。

该命令会在~/.ssh/目录中自动生成一对公私钥。默认私钥名称：id_rsa，默认公钥名称：id_rsa.pub

openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

向 OpenStack 添加公钥，用于创建实例时选择：

root@allone:~# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey
+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| fingerprint | 11:36:75:e0:c3:98:4c:97:90:30:f5:69:e1:17:a9:4b |
| name        | mykey                                           |
| user_id     | 9027da91a2134825a421d78db11011d0                |
+-------------+-------------------------------------------------+

openstack keypair list

root@allone:~# openstack keypair list
+---------------------+-------------------------------------------------+
| Name                | Fingerprint                                     |
+---------------------+-------------------------------------------------+
| mykey               | 11:36:75:e0:c3:98:4c:97:90:30:f5:69:e1:17:a9:4b |
| ubuntu cloud server | 67:b4:8a:64:83:4e:47:d0:7c:87:46:34:3b:03:e6:17 |
+---------------------+-------------------------------------------------+

ssh ubuntu@10.0.2.111

其中，ubuntun是实例的用户名，10.0.2.111是实例的 IP 地址。

WEB 界面方式

创建密钥对

Project-Key Pairs-Create Keypairs

Responsive Image

为密钥对起个名字：sshkey，并选择一个类型：SSH Key

Responsive Image

点击创建后会弹出下载私钥的窗口，这时候需要将私钥下载到本地。并将他移动到 ssh 目录下方便管理。

# 切换root用户，因为我们一直都是用root用户操作的OpenStack
sudo su
mv sshkey.pem ~/.ssh

Responsive Image

使用公钥创建实例

Project-Instances-Launch Instance

Responsive Image

在 Key Pair 中选择刚刚创建的 sshkey。这里实际就是将创建的密钥对中的公钥放到了我们的实例中，这样我们就可以拿着本地的私钥去访问实例。

Responsive Image

登录实例

ssh -i ~/.ssh/sshkey.pem  ubuntun@10.0.2.111

其中~/.ssh/sshkey.pem是我们下载的私钥文件，ubuntun是实例的用户名，10.0.2.111是实例的 IP 地址。

Devstack 部署 OpenStack

Fri, 09 Jun 2023 21:38:34 +0000

Devstack 部署 OpenStack

试验发现在 Host 为 Ubuntu20.04 和 22.04 上无法顺利安装 VirtualBox，请在 Ubuntu18.04 上安装 VirtualBox。虚拟机镜像版本为 Ubuntu20.04，以下步骤可以稳定复现，OpenStack master（c424a7a299e37004d318107648bb18e157344985）版本。

总而言之，在 18.04 版本上安装 VirtualBox，在 20.04 版本上安装 OpenStack。

因为安装 OpenStack 容易破话系统包依赖，如果为了学习建议在虚拟机中安装。

安装过程中需要下载镜像，请确认机器可以访问外网。

安装 VirtualBox

sudo apt update
sudo apt install virtualbox virtualbox-ext-pack

确认 VirtualBox 配置

请确认 VirtualBox 配置如下，VirtualBox 默认配置硬盘为 10G，远远不够用，为了避免后续的麻烦，请确认如下配置：

磁盘大于 100G

内存大于 16G

CPU 大于 4 个

下载镜像并安装

镜像可以去清华大学开源软件镜像站 | Tsinghua Open Source Mirror下载。

更新源

sudo mv /etc/apt/sources.list /etc/apt/sources.list.bk && sudo bash -c "cat << EOF > /etc/apt/sources.list
deb http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-security main restrcdicted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restrcd && mkdir .pip && cd .pipicted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
EOF"

备用源 (以备不时之需)

sudo mv /etc/apt/sources.list /etc/apt/sources.list.bk && sudo bash -c "cat << EOF > /etc/apt/sources.list
deb http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-security main restrcdicted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restrcd && mkdir .pip && cd .pipicted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ jammy-backports main restricted universe multiverse
EOF"

sudo mv /etc/apt/sources.list /etc/apt/sources.list.bk && sudo bash -c "cat << EOF > /etc/apt/sources.list
deb https://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse
deb-src https://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse
deb https://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse
deb-src https://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse

deb https://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse
deb-src https://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse

deb https://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse
deb-src https://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse
EOF"

sudo mv /etc/apt/sources.list /etc/apt/sources.list.bk && sudo bash -c "cat << EOF > /etc/apt/sources.list
deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-proposed main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ xenial-backports main restricted universe multiverse
EOF"

安装基础包

sudo apt update
sudo apt install git
sudo apt install aptitude

aptitude 用于解决包依赖冲突。

添加用户

添加 stack 用户

sudo useradd -s /bin/bash -d /opt/stack -m stack

授予 sudo 权限

echo "stack ALL=(ALL) NOPASSWD: ALL" | sudo tee /etc/sudoers.d/stack

切换到 stack 用户

sudo su -  stack

PIP 配置

cd && mkdir -p  .pip && cd .pip && bash -c "cat << EOF > ~/.pip/pip.conf
[global]
timeout = 6000
index-url = http://mirrors.aliyun.com/pypi/simple/
trusted-host = mirrors.aliyun.com
EOF"

仓库下载

git clone https://github.com/openstack/devstack --depth 1

配置 local.conf

只需要修改 HOST_IP，其他的可以不用修改，HOST_IP 为本机 IP 地址，可以使用 ifconfig 查看。如果是虚拟机就是虚拟机的 IP，virtualbox 创建的虚拟机默认为 10.0.2.15。

cd devstack && touch local.conf && bash -c "cat << EOF > /opt/stack/devstack/local.conf
[[local|localrc]]
HOST_IP=10.0.2.15
GIT_BASE=http://git.trystack.cn

ADMIN_PASSWORD=user
DATABASE_PASSWORD=$ADMIN_PASSWORD
RABBIT_PASSWORD=$ADMIN_PASSWORD
SERVICE_PASSWORD=$ADMIN_PASSWORD
EOF"

安装

FORCE=yes ./stack.sh

BUG 解决

systemd 包依赖冲突

sudo aptitude install systemd
选择N
再选择Y

ModuleNotFoundError: No module named ‘distutils.cmd’

 sudo apt-get install python3.10-distutils
 # 根据自己的 Python 版本决定，可以 python3.7-distutils python3.8-distutils   ....都试一遍

apparmor invalid capability bpf

sudo apt install apparmor

No tenant network is available for allocation

vim /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan

[ml2_type_vxlan]
vni_ranges = 1:1000

unix:/var/run/openvswitch/db.sock: database connection failed (Connection refused)

cd  /opt/stack/devstack/lib/neutron_plugin 
vi ovn_agent 
116G  跳转到116行
OVS_RUNDIR=$OVS_PREFIX/var/run/openvswitch 修改为OVS_RUNDIR=$OVS_PREFIX/var/run/ovn 
sudo rm -rf /var/run/ovn

VirtualBox 启动报错 : Failed to send host log message

Ctrl+F2进入另一个终端
输入：startx进入桌面

AttributeError: module ‘collections‘ has no attribute ‘MutableMapping‘

collections.MutableMapping
collections.abc.MutableMapping

ModuleNotFoundError: No module named ‘distutils.core’

sudo apt install python3-pip

ERROR: Cannot uninstall ‘simplejson’. It is a distutils installed project and thus we cannot

sudo pip install --ignore-installed wrapt enum34 simplejson netaddr

server certificate verification failed. CAfile: none CRLfile: none

git config --global http.sslverify false
git config --global https.sslverify false

Ubuntu:登录页面验证出错

sudo loginctl unlock-sessions

Ubuntu:重装桌面

sudo apt install ubuntu-desktop

Ubuntu 登录界面 Authentication Error

sudo loginctl unlock-sessions
sudo echo "fs.inotify.max_user_watches=524288" >> /etc/sysctl.conf

Ubuntu 无法进入桌面系统，但是可以 SSH 链接

sudo rm -rf /var/lib/apt/lists/*
sudo apt-get clean
sudo apt-get update
sudo apt-get install --reinstall appstream

gsettings-desktop-schemas : 破坏：mutter (＜ 3.31.4) 但是 3.28.4-0ubuntu18.04.2 正要被安装解决方案

sudo apt install gsettings-desktop-schemas
sudo apt-get install build-essential